4 ms·
As far as I know it doesn't. I should have been more clear: GCP's Anycast, no-warming-need LB is way cooler than AWS traditional, single-region with totally un
by numbsafari 10y ago
As far as I know it doesn't.
I should have been more clear: GCP's Anycast, no-warming-need LB is way cooler than AWS traditional, single-region with totally unreliable DNS "routing" on top (because you always want to rely on client DNS TTLs to handle a service cutover...).
The problem is, if you can't use a TLS proxy for security reasons, then you can't use the HTTP(s) LB, which will make you less happy than if you could use it.
- zimbatm 10y agoIn what scenarios is GCP's load-balancer not trusted but their compute instance is?
- numbsafari 10y agoWhen, up until recently, not even Google was willing to cover their own load balancer under their BAA. The load balancer is a shared resource. Your data is being decrypted and re-encrypted in a shared memory space with all other customer's data. Consider the issue CloudFlare customers faced recently [1]. [1] https://techcrunch.com/2017/02/23/major-cloudflare-bug-leaked-sensitive-data-from-customers-websites/ https://techcrunch.com/2017/02/23/major-cloudflare-bug-leake...
- vgt 10y agoI am not in compliance, but absence of evidence doesn't imply evidence of absence. Google Cloud has probably industry's highest security standards in place [0] . Getting governing bodies to sign off on their accreditations is a very separate issue. (work on Google Cloud) [0] https://cloud.google.com/security/whitepaper https://cloud.google.com/security/whitepaper